Overview
overview
7Static
static
3Slenderman...re.apk
android-9-x86
6Slenderman...re.apk
android-11-x64
7Assembly-C...ss.dll
windows7-x64
1Assembly-C...ss.dll
windows10-2004-x64
1Assembly-CSharp.dll
windows7-x64
1Assembly-CSharp.dll
windows10-2004-x64
1Mono.Security.dll
windows7-x64
1Mono.Security.dll
windows10-2004-x64
1System.Core.dll
windows7-x64
1System.Core.dll
windows10-2004-x64
1System.dll
windows7-x64
1System.dll
windows10-2004-x64
1UnityEngin...le.dll
windows7-x64
1UnityEngin...le.dll
windows10-2004-x64
1UnityEngin...le.dll
windows7-x64
1UnityEngin...le.dll
windows10-2004-x64
1UnityEngin...le.dll
windows7-x64
1UnityEngin...le.dll
windows10-2004-x64
1UnityEngin...ts.dll
windows7-x64
1UnityEngin...ts.dll
windows10-2004-x64
1UnityEngin...le.dll
windows7-x64
1UnityEngin...le.dll
windows10-2004-x64
1UnityEngin...le.dll
windows7-x64
1UnityEngin...le.dll
windows10-2004-x64
1UnityEngin...le.dll
windows7-x64
1UnityEngin...le.dll
windows10-2004-x64
1UnityEngin...le.dll
windows7-x64
1UnityEngin...le.dll
windows10-2004-x64
1UnityEngin...le.dll
windows7-x64
1UnityEngin...le.dll
windows10-2004-x64
1UnityEngin...le.dll
windows7-x64
1UnityEngin...le.dll
windows10-2004-x64
1Analysis
-
max time kernel
852674s -
max time network
149s -
platform
android_x64 -
resource
android-x64-arm64-20230824-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20230824-enlocale:en-usos:android-11-x64system -
submitted
26/08/2023, 17:07
Static task
static1
Behavioral task
behavioral1
Sample
Slenderman_ The Curse_1.4.6_Apkpure.apk
Resource
android-x86-arm-20230824-en
Behavioral task
behavioral2
Sample
Slenderman_ The Curse_1.4.6_Apkpure.apk
Resource
android-x64-arm64-20230824-en
Behavioral task
behavioral3
Sample
Assembly-CSharp-firstpass.dll
Resource
win7-20230712-en
Behavioral task
behavioral4
Sample
Assembly-CSharp-firstpass.dll
Resource
win10v2004-20230703-en
Behavioral task
behavioral5
Sample
Assembly-CSharp.dll
Resource
win7-20230712-en
Behavioral task
behavioral6
Sample
Assembly-CSharp.dll
Resource
win10v2004-20230703-en
Behavioral task
behavioral7
Sample
Mono.Security.dll
Resource
win7-20230712-en
Behavioral task
behavioral8
Sample
Mono.Security.dll
Resource
win10v2004-20230703-en
Behavioral task
behavioral9
Sample
System.Core.dll
Resource
win7-20230712-en
Behavioral task
behavioral10
Sample
System.Core.dll
Resource
win10v2004-20230703-en
Behavioral task
behavioral11
Sample
System.dll
Resource
win7-20230712-en
Behavioral task
behavioral12
Sample
System.dll
Resource
win10v2004-20230824-en
Behavioral task
behavioral13
Sample
UnityEngine.AIModule.dll
Resource
win7-20230712-en
Behavioral task
behavioral14
Sample
UnityEngine.AIModule.dll
Resource
win10v2004-20230703-en
Behavioral task
behavioral15
Sample
UnityEngine.ARModule.dll
Resource
win7-20230712-en
Behavioral task
behavioral16
Sample
UnityEngine.ARModule.dll
Resource
win10v2004-20230703-en
Behavioral task
behavioral17
Sample
UnityEngine.AccessibilityModule.dll
Resource
win7-20230712-en
Behavioral task
behavioral18
Sample
UnityEngine.AccessibilityModule.dll
Resource
win10v2004-20230703-en
Behavioral task
behavioral19
Sample
UnityEngine.Advertisements.dll
Resource
win7-20230824-en
Behavioral task
behavioral20
Sample
UnityEngine.Advertisements.dll
Resource
win10v2004-20230703-en
Behavioral task
behavioral21
Sample
UnityEngine.AnimationModule.dll
Resource
win7-20230712-en
Behavioral task
behavioral22
Sample
UnityEngine.AnimationModule.dll
Resource
win10v2004-20230703-en
Behavioral task
behavioral23
Sample
UnityEngine.AssetBundleModule.dll
Resource
win7-20230712-en
Behavioral task
behavioral24
Sample
UnityEngine.AssetBundleModule.dll
Resource
win10v2004-20230703-en
Behavioral task
behavioral25
Sample
UnityEngine.AudioModule.dll
Resource
win7-20230712-en
Behavioral task
behavioral26
Sample
UnityEngine.AudioModule.dll
Resource
win10v2004-20230703-en
Behavioral task
behavioral27
Sample
UnityEngine.ClothModule.dll
Resource
win7-20230712-en
Behavioral task
behavioral28
Sample
UnityEngine.ClothModule.dll
Resource
win10v2004-20230824-en
Behavioral task
behavioral29
Sample
UnityEngine.CoreModule.dll
Resource
win7-20230712-en
Behavioral task
behavioral30
Sample
UnityEngine.CoreModule.dll
Resource
win10v2004-20230703-en
Behavioral task
behavioral31
Sample
UnityEngine.CrashReportingModule.dll
Resource
win7-20230712-en
Behavioral task
behavioral32
Sample
UnityEngine.CrashReportingModule.dll
Resource
win10v2004-20230703-en
General
-
Target
Slenderman_ The Curse_1.4.6_Apkpure.apk
-
Size
38.9MB
-
MD5
7852de521dc52c85f5ea7c08a5be8687
-
SHA1
fe771d803405a872fe803d318cf2d161191eab4a
-
SHA256
b9f4abcfbf019c28c6a8c1487962fdbbeb62100c8f02fc6311a6753bc9238ae8
-
SHA512
55fa247803995f2b65b182d0e9cfda6d7c5b8bd9e793faee8ce581566512deaca6ee17f2fde3cf041299f67ad8e93376b9c833fa86bcb9a5f8e1ba0b4391c4c5
-
SSDEEP
786432:vj3NrrRvb4Hhq+RKBDy+194OtWuMgB3pyxkXIAuhfdawkgrBy0zvLEGa06s4hq93:b3xRvb4B93+f4CVB3cxZAqbkaMK5ajOJ
Malware Config
Signatures
-
Loads dropped Dex/Jar 1 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/com.kalipso.slendermanlamaldicion/cache/1582435991586.jar 4441 com.kalipso.slendermanlamaldicion -
Reads information about phone network operator.
-
Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.kalipso.slendermanlamaldicion
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
9KB
MD5e8e0527a01aefdb89afd2c508f131da1
SHA1f1103e6b260c657ceb3d95f1b023af3fda8b133a
SHA256f809447486f89fcaa74f87e06d126d103d37eb2b3157e88f2c06d989b2c284ce
SHA512fb53683a83f1068d0f94567b156e6a8910c45b1b5f33db919f7e0b9c55eab28507a235ef76d44d5b549599ea3b54dbc00496a633339d276a80f395da938d6d34
-
Filesize
20KB
MD5fde2ee00cbd121cfab5290b078aa3ceb
SHA1e2b77d5320e155e413d040a8c20020962065b2f8
SHA2562897b0812077c654a9b3fbb0b6303d5cde681eeba7ad9981de65716c7810d685
SHA512a9326aff8e454a2b4ac09984ef2a65fddd4dc146b4c44d839035549bff8c9fdaae490326d0b018f76c1ca2e4fb25426d74f550ca0950982fba632a023af99a56
-
/storage/emulated/0/Android/data/com.kalipso.slendermanlamaldicion/cache/UnityAdsCache/UnityAdsCache-8272090177c72e622cef2ab8131cf2ccd6c35337b4129cf18115eff31ef9a0da.webm (deleted)
Filesize2.3MB
MD5c5f70fd4069c0e372df1109adf3095c2
SHA115787b140e56aee1f1488cd5bc0012f6defb74bb
SHA25668962b7930a9669dd35c3bc075229119f5d3fb671f77191dc90f05d73dc3254c
SHA512085398065953f5eb915ebf55720d913e273ee4d5ab039f49098eca1972479b538595aa06d19e031de8f0cdf464a0f854dee958428678fe9c27ae03ec07167365
-
/storage/emulated/0/Android/data/com.kalipso.slendermanlamaldicion/cache/UnityAdsCache/UnityAdsCache-bb65165a51b71a59390774d20ab8a37d0e5e5d8659080fcbec29a5ed71aff6fd.html (deleted)
Filesize1.0MB
MD511efa8dcc7ae3633e8f50340c6fff711
SHA1606c7508e22e0d0b214cfd924c167f54d45677e1
SHA2560c8943eed04aca10bb75b29c6c319672684cc6a3f357084a57a2f1d2785f0e80
SHA51206e720ebb95fc878b72b6edd8e7e181b1607ccbd832bcb3b4064195f8929bf952c84ad8c463aee2b904b26145c825caff271e898ed847413f4fc2ae2e8ee747b
-
/storage/emulated/0/Android/data/com.kalipso.slendermanlamaldicion/cache/UnityAdsCache/UnityAdsCache-f98e923cdacd940c87befdb48fae4a9bbe403222b23aa62857550c8056723472.jpg
Filesize23KB
MD5e17614b32885104f84039939cfe8831e
SHA1f4bd3bd02ec4b579002414c6cf0abed317c1b55c
SHA256d124cf14ca8b9ec7604f3e85310d90042ef2ef947b4c4d0eaa9371d5efe2c1cb
SHA51248fc9b0eb7763e869871a6d5bacc28cfaa494abbf6b800d1bda56ab34b836095e41d90c4237d769f3375a51a82fec12f00dc6b67ddbcf5af14fefef314618e35
-
/storage/emulated/0/Android/data/com.kalipso.slendermanlamaldicion/cache/UnityAdsCache/UnityAdsStorage-private-data.json
Filesize41B
MD516d3e6eac0e79222a9b368edac765b34
SHA148d5e621fcdd84108f5750d6905180b622715b11
SHA2563a518b70256a689906d6740062462e3124aad6e55c5aa47339a87a56e4933ee7
SHA512d0aaacf86100135241426e2a0e9ba44414aa456cd708124e2f9c3a8037e008870cbcb506d316e4fe7cfe1d6dc3073393989a6f3c29f7cfabd6b0f65057afe747
-
/storage/emulated/0/Android/data/com.kalipso.slendermanlamaldicion/cache/UnityAdsCache/UnityAdsStorage-private-data.json
Filesize475B
MD552cc739d45afdac3d31de42bff54d38d
SHA174689a7eea87953431c2553465509e5bc353246b
SHA256cee815457da72d9ce4983cfac6ceb6f73e23da6f8eac4b90e46e2284f3bae572
SHA512eb664b5b3df6ad43b66393af6f4e7878861937c26269cf164c30e6169f67cbf40fb800b15df134ca04eb543eeb496a479104c0838e5e1668f4eaa68063724db7
-
/storage/emulated/0/Android/data/com.kalipso.slendermanlamaldicion/cache/UnityAdsCache/UnityAdsStorage-private-data.json
Filesize475B
MD552cc739d45afdac3d31de42bff54d38d
SHA174689a7eea87953431c2553465509e5bc353246b
SHA256cee815457da72d9ce4983cfac6ceb6f73e23da6f8eac4b90e46e2284f3bae572
SHA512eb664b5b3df6ad43b66393af6f4e7878861937c26269cf164c30e6169f67cbf40fb800b15df134ca04eb543eeb496a479104c0838e5e1668f4eaa68063724db7
-
/storage/emulated/0/Android/data/com.kalipso.slendermanlamaldicion/cache/UnityAdsCache/UnityAdsStorage-private-data.json
Filesize475B
MD552cc739d45afdac3d31de42bff54d38d
SHA174689a7eea87953431c2553465509e5bc353246b
SHA256cee815457da72d9ce4983cfac6ceb6f73e23da6f8eac4b90e46e2284f3bae572
SHA512eb664b5b3df6ad43b66393af6f4e7878861937c26269cf164c30e6169f67cbf40fb800b15df134ca04eb543eeb496a479104c0838e5e1668f4eaa68063724db7
-
/storage/emulated/0/Android/data/com.kalipso.slendermanlamaldicion/cache/UnityAdsCache/UnityAdsStorage-private-data.json
Filesize575B
MD54aa6a361e09108525d856b788476e149
SHA1d2ad1134881482f0d5ca65ff947be200b34bacb6
SHA25603a7618411e8ea5fac2d300691c84bd3927013f6a6a1445d7acca3ac97b4a3d0
SHA512ca5ab0c5efefb711f74867b937bb35b4733a75f3d3d2c3305fd5cd046e06bcedd31aa72232d11fa6517732e365c45c64d019725d41c399a4faf9d8b264410840
-
/storage/emulated/0/Android/data/com.kalipso.slendermanlamaldicion/cache/UnityAdsCache/UnityAdsStorage-private-data.json
Filesize1KB
MD5aad73073fbeec5131b1d06e3c24c1973
SHA12b19aa89d53ab92ea2e0d68785db69cd89821925
SHA2562cd43843ecfbebfe5ba513fdb7f8faf1def040d801a0add203df581c7c90e9bd
SHA512c74cc2a8d1579a0e5f80f7cb0e572a16b0eb79207fe4f14815282473ae6d22b70ded02a203f3688a774bc19db38d0ad9ccde5279f5ca9653e8543d667d7d5bdc
-
/storage/emulated/0/Android/data/com.kalipso.slendermanlamaldicion/cache/UnityAdsCache/UnityAdsStorage-private-data.json (deleted)
Filesize2B
MD599914b932bd37a50b983c5e7c90ae93b
SHA1bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA25644136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
SHA51227c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
-
/storage/emulated/0/Android/data/com.kalipso.slendermanlamaldicion/cache/UnityAdsCache/UnityAdsStorage-public-data.json
Filesize111B
MD53598868be0835d74e84c1c120fd22757
SHA18f3d94573004615800eff6404addc24d74af1fcc
SHA2565157166f657073f268e7af40d4315a72904e42c1c28ebdd72c73c72c0bad4d31
SHA512792c7007b8ff520f5185e4c26e37a6eae86aabc8fea167d3984e1d3ca0925307c04f99910173e593e0642a956084f90860cd37dbce2edee8a0c5425b93ee960e
-
/storage/emulated/0/Android/data/com.kalipso.slendermanlamaldicion/cache/UnityAdsCache/UnityAdsStorage-public-data.json
Filesize215B
MD585b58f7492e9ff8204deabff4e32d545
SHA1057428e7ad6a36680b8df25102f16a85c7825c7f
SHA256c7f6531f84042da5d8b08ed53f0f3db6b9d7c7369e7579d3e8077cf2e00576e3
SHA512380d13dd4f153b88ea6a40d7566896330ce1ba8919ed6c89e24e63e878b078af6b7a758a06cd05b7e4635e759cdb3184ec7b7e756befdd62c57ea284c1e801c3
-
/storage/emulated/0/Android/data/com.kalipso.slendermanlamaldicion/cache/UnityAdsCache/UnityAdsStorage-public-data.json (deleted)
Filesize2B
MD599914b932bd37a50b983c5e7c90ae93b
SHA1bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA25644136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
SHA51227c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
-
/storage/emulated/0/Android/data/com.kalipso.slendermanlamaldicion/cache/UnityAdsCache/UnityAdsTest.txt (deleted)
Filesize4B
MD5098f6bcd4621d373cade4e832627b4f6
SHA1a94a8fe5ccb19ba61c4c0873d391e987982fbbd3
SHA2569f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08
SHA512ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff
-
/storage/emulated/0/Android/data/com.kalipso.slendermanlamaldicion/cache/UnityAdsCache/UnityAdsTest.txt (deleted)
Filesize4B
MD5098f6bcd4621d373cade4e832627b4f6
SHA1a94a8fe5ccb19ba61c4c0873d391e987982fbbd3
SHA2569f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08
SHA512ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff
-
/storage/emulated/0/Android/data/com.kalipso.slendermanlamaldicion/cache/UnityAdsCache/UnityAdsWebApp.html (deleted)
Filesize1.4MB
MD5444c12afd7f5858a112b8f77ecb46171
SHA111c36b58ba71405da6fa29c51f8c376f373ae503
SHA256df1b23338ab12d32c5ec398b7378bb1639663d8630b59d048d5d397d7846ec83
SHA5122a49635241ce970272ac9a3dc0918045df8063c4f0d1f030ec97e20f6d9535ca2411ffeb66ad3978210c73732fecc6410b00fd173fe3bfbad911efa801d2cad3
-
/storage/emulated/0/Android/data/com.kalipso.slendermanlamaldicion/files/Unity/858153e5-2744-4579-b824-28bd2bd839bd/Analytics/config
Filesize304B
MD5e4be01c27e0fd275d87412cda20ad316
SHA18c500cb6373f803b2d5bce6b9cc068995be909d1
SHA2564716abdacf953bd6d174f6ea532af3b2e3d253c0fb4db3d6b7cc4db7eff66035
SHA512df946599b1ca5bdda43468a085c59ca3bec33ad5c5cacd467d66b70a058659ad4115ae877e92122f514af41cf1c2c21c810ec47a437862ae8f033b364ac4d6ea
-
/storage/emulated/0/Android/data/com.kalipso.slendermanlamaldicion/files/Unity/858153e5-2744-4579-b824-28bd2bd839bd/Analytics/values
Filesize152B
MD50f23a43ba9d1b2d5fe3d15df10e4ab25
SHA182010c6d971ff169ef473f702a9990f15becc631
SHA256238129360278245746c250778a3726030f1bdda8d9f2922c9597cb6051896e8a
SHA512e16c744bcb76b69ca5f436c5a2beb4e1a658c1bbfb689acef1b9f90083fa1c594f7de96c9a8b6764187f75d56769b0b5163c53457d637fb826baa45b7a122f16